Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior

Críticas / altas1452▲ 101 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior

31 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2022-28791	Modificada	Media (5.5)	0.22%	—	Samsung Galaxy Store	3/5/2022	17/6/2026	Improper input validation vulnerability in InstallAgent in Galaxy Store prior to version 4.5.41.8 allows attacker to overwrite files stored in a specific path. The patch adds proper protection to prevent overwrite to existing files.
CVE-2022-28776	Modificada	Alta (7.8)	0.27%	—	Samsung Galaxy Store	11/4/2022	17/6/2026	Improper access control vulnerability in Galaxy Store prior to version 4.5.36.4 allows attacker to install applications from Galaxy Store without user interactions.
CVE-2022-28544	Modificada	Media (5.5)	0.90%	—	Samsung Galaxy Store	11/4/2022	17/6/2026	Path traversal vulnerability in unzip method of InstallAgentCommonHelper in Galaxy store prior to version 4.5.40.5 allows attacker to access the file of Galaxy store.
CVE-2022-28542	Modificada	Media (5.5)	0.27%	—	Samsung Galaxy Store	11/4/2022	17/6/2026	Improper sanitization of incoming intent in Galaxy Store prior to version 4.5.40.5 allows local attackers to access privileged content providers as Galaxy Store permission.
CVE-2022-22288	Modificada	Alta (7.5)	0.92%	—	Samsung Galaxy Store	10/1/2022	17/6/2026	Improper authorization vulnerability in Galaxy Store prior to 4.5.36.5 allows remote app installation of the allowlist.
CVE-2021-25499	Modificada	Media (5.5)	0.22%	—	Samsung Galaxy Store	6/10/2021	17/6/2026	Intent redirection vulnerability in SamsungAccountSDKSigninActivity of Galaxy Store prior to version 4.5.32.4 allows attacker to access content provider of Galaxy Store.